Cyber experts warn of ‘aggressive’ threat actor targeting healthcare

Security firm Mandiant Intelligence has warned about the aggressive and financially motivated threat actor FIN12, which specializes in ransomware attacks targeting the healthcare sector. The group’s primary focus is the deployment of RYUK ransomware and it has disproportionately affected healthcare organizations. Mandiant believes FIN12 may evolve its operations to include data theft in the future. The majority of its victims are in North America, but there are indications of expanding regional targeting. It is suspected that FIN12 consists of Russian-speaking actors based in the Commonwealth of Independent States.